ALT-PU-2023-1941: package fscrypt update to version 0.3.4-alt1
Описание
This update upgrades fscrypt to version 0.3.4-alt1.
Устраненные уязвимости3
Ссылки4
GHSA-8vwm-8vj8-rqjf
https://github.com/advisories/GHSA-8vwm-8vj8-rqjfGHSA-mpq4-rjj8-fjph
https://github.com/advisories/GHSA-mpq4-rjj8-fjphGHSA-wxjg-p59j-6c92
https://github.com/advisories/GHSA-wxjg-p59j-6c92Связанные уязвимости
fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.
fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.
fscrypt through v0.3.2 creates a world-writable directory by default w ...
Uncontrolled Resource Consumption in github.com/google/fscrypt
The bash_completion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circumstances. A local user who has control over mountpoint paths could potentially escalate their privileges if they create a malicious mountpoint path and if the system administrator happens to be using the fscrypt bash completion script to complete mountpoint paths. We recommend upgrading to version 0.3.3 or above